CVE-2018-10224: CSRF
Published Apr 19, 2018
·Updated
An issue was discovered in YzmCMS 3.8. There is a CSRF vulnerability that can add a tag via /index.php/admin/tag/add.html.
Affected Software
1 affected component
YzmCMS YzmCMS=3.8
Event History
Apr 19, 2018
CVE Published
via MITRE·08:00 AM
Data Sourced
via MITRE·08:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2018-10224?
CVE-2018-10224 has a medium severity due to its CSRF vulnerability affecting tag management.
2
How do I fix CVE-2018-10224?
To fix CVE-2018-10224, implement CSRF protection mechanisms in the /index.php/admin/tag/add.html endpoint.
3
What software versions are affected by CVE-2018-10224?
CVE-2018-10224 affects YzmCMS version 3.8.
4
What type of vulnerability is CVE-2018-10224?
CVE-2018-10224 is a Cross-Site Request Forgery (CSRF) vulnerability.
5
Can exploitation of CVE-2018-10224 lead to data manipulation?
Yes, exploitation of CVE-2018-10224 allows unauthorized addition of tags, which can manipulate data.